Scope and service provider
This policy applies to the Panacea website, desktop app, and the account, paid usage, and AI creative services we provide. The service provider is Panacea (operated by an individual proprietor). Privacy requests may be submitted through the privacy contact channel.
Local project storage and online generation are separate processes. Project files are primarily stored on your device. When you use an online model, the prompts, references, and parameters needed to complete the request are sent to the corresponding service.
Information we process
- Account and security information: Usernames, salted password verification hashes, recovery-code verification information, login sessions, and device labels. Network information in requests may be used for abuse prevention and security.
- Creative information: Prompts, reference images or audio/video, conversation content, models, and generation parameters you submit, together with generated results and task status.
- Transaction and usage information: Order numbers, amounts, payment status, account balances, usage consumption, usage restorations after failures, and reconciliation information.
- Support information: Emails, issue descriptions, order numbers, and troubleshooting materials you provide. Do not provide passwords, private keys, complete card numbers, or unrelated sensitive information.
- Website visits: This international website is hosted through Northwest's Business Identity hosting service. The hosting provider may process request and security logs needed to deliver the website. This edition does not embed Cloudflare Insights analytics. The domestic website and online platform may use Cloudflare services.
Purposes and grounds for processing
We process information to verify accounts, perform requested tasks, deliver paid usage, reconcile bills, provide support, prevent fraud and failures, and fulfill applicable legal obligations. Where permitted by applicable law, necessary processing is based on performing service arrangements, maintaining security, or legal obligations. Processing requiring consent is separately authorized in an appropriate manner.
We do not sell personal information or use creative materials for targeted advertising. Uploading materials does not grant default permission to use them as promotional examples. Public promotion, additional marketing, or a change in processing purpose requires separate explanation and any necessary authorization.
Online services and third parties
Depending on your selected mode and channel, online requests may connect through the Panacea platform to Comfly, Tuzi API, or Volcengine, or may be handled directly by a service you configure. Text services need the relevant conversation; reference-based image or audio/video generation needs the relevant materials and parameters. Third parties should receive only the information needed for the service. Changing channels does not alter historical tasks or bills.
- Cloudflare: Provides networking, security, and performance services for the domestic website and online platform. See the Cloudflare privacy policy.
- AI service providers: Process generation inputs you submit and return results. Provider retention and training rules may differ. Consider the selected service's rules before uploading sensitive materials.
- Payment services: Payments are handled by the channel shown before payment. The actual payment tool, acquirer, or collection channel processes transaction information needed for payment. Providers and rules are identified on the order and payment page. Panacea records order numbers, amounts, and payment status needed to deliver the service, but does not store complete card numbers.
For self-configured services, you choose the recipient and its own rules apply. For disclosures or international processing we arrange, we meet applicable notification, assessment, and authorization requirements. This policy does not replace any required separate consent.
Retention, international processing, and security
Local projects, materials, and offline snapshots are stored on devices you control. Back them up before deletion or cleanup. Platform account, transaction, and usage records are stored online. Network, model, and payment providers may process data in different countries or regions. Local project storage does not mean online requests never leave your device.
- Local projects and materials: You determine how long to keep them and delete them through the app or your device's file manager.
- Account information: Retained while the account exists and as needed to provide services. After verified account closure, information no longer required is deleted or anonymized.
- Transactions and ledgers: Retained after completion of the transaction or dispute for periods required by applicable tax, accounting, transaction-record, and dispute obligations. Where several requirements apply, the longer applicable period is used. Records are cleared or anonymized once the period ends and no dispute remains.
- Support materials: Retained after resolution for the shortest period needed for follow-up review and related disputes. Attachments no longer needed are cleared first.
- Security and access records: Retained as needed to identify security risks, investigate incidents, and meet legal cybersecurity requirements; not used for unrelated profiling or marketing.
Where a fixed number of days cannot be specified in advance, retention depends on whether the purpose has ended, orders or disputes remain open, and legal retention obligations have expired. We explain the specific basis when handling a request. Records that must be retained by law, or cannot yet be technically deleted, are restricted to necessary storage and security protection.
Account passwords are verified using salted hashes and online interfaces use HTTPS. Account credentials and server-side payment keys are not published on the website. If an incident affects personal information, we take remedial measures and notify users and authorities as required. These measures cannot eliminate all risks; protect your devices and recovery codes.
Your choices and requests
You may request access, correction, copying, or deletion of personal information, close your account, or object to unnecessary processing. Please contact support and specify your request. We may verify account ownership to prevent disclosure to the wrong person.
Data and account-closure requests are reviewed manually. We explain handling and retention reasons where paid orders, unfinished tasks, or legally required ledgers are involved. If you decline to provide materials or parameters essential to online generation, that generation cannot complete, but you can still manage local projects.
Third-party retention and training rules depend on the selected service. Review its terms before submitting materials. Local project storage does not mean online generation requests are not processed by third parties.
Minors, updates, and contact
The service is intended for users aged 18 or older. Anyone under 18 should not register a paid account. Do not upload unauthorized materials involving minors. If minors' information is collected inadvertently, we verify and restrict processing and handle information that should not be retained as required by law.
Material policy changes are generally announced on the website or in the app 15 days in advance, with an updated version date. New processing purposes or matters requiring renewed consent receive separate authorization. Visiting the website alone is not treated as agreement to all data processing.
Privacy requests are reviewed manually, with a response within 15 business days after complete information is received. We explain progress for complex requests; shorter deadlines required by applicable law take precedence. You may complain to the competent authority. Privacy contact: panacea@panaceacanvasus.com.